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Claims 

1. A system for protecting sensitive information in a network, comprising: 
5 a network component for storing the sensitive information; and 

a network device, attachable to the network, that lacks the sensitive 
information and is inoperative, at least in part, until the sensitive information is stored 
therein; 

wherein when the network device is attached to the network, the sensitive 
10 information is downloaded from the network component and stored in the network device 
so that device becomes operational; 

wherein when the network device is disconnected from the network, the 
sensitive information is erased from the network device, whereby making the device 
inoperative at least in part and removing the sensitive information from the device. 
15 2. The system of claim 1, wherein the sensitive information is selected from 

the group consisting of configuration information, a software image, and a combination 
of the forgoing. 

3. The system of claim 2, wherein the configuration information is selected 
from the group consisting of a password, a user ID, a network security key, and any 

20 combination of the forgoing. 

4. The system of claim 1, wherein the network device includes a volatile 
memory for storing the sensitive information. 

5. The system of claim 1 , wherein the network component is a LAN switch. 

6. The system of claim 1 , wherein the network device is a wireless access point 

25 (AP). 

7. The system of claim 1, wherein the network component is located in a 
secure environment. 

8. A method for protecting sensitive information in a network, comprising: 
storing the sensitive information at a network component; 
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attaching a network device to the network, the network device lacking the 
sensitive information and being inoperative, at least in part, until the sensitive 
information is stored therein; 

downloading the sensitive information from the network component to the 
5 network device; 

storing the sensitive information in the network device so that device 
becomes operational on the network; and 

when the device is disconnected from the network, erasing the sensitive 
information from the network device. 
10 9. The method of claim 8, wherein the sensitive information is selected from 

the group consisting of configuration information, a software image, and a combination 
of the forgoing. 

10. The method of claim 9, wherein the configuration information is selected 
from the group consisting of a password, a user ID, a network security key, and any 

15 combination of the forgoing. 

11. The method of claim 8 wherein the network device includes a volatile 
memory for storing the sensitive information. 

12. The method of claim 8, wherein the network component is a LAN switch. 

13. The method of claim 8, wherein the network device is a wireless access 
20 point (AP). 

14. The method of claim 8, wherein the network component is located in a 
secure environment. 

15. A device that is non-operational on a network unless the device is storing 
configuration information, comprising: 

25 an interface for communicating with the network; 

a memory whose contents are erased upon loss of power to the device; and 
means for downloading from the network and storing in the memory the 
configuration information, wherein the configuration information, when stored in the 
memory, permits the device to operate on the network. 
30 16. The device of claim 1 5, wherein the downloading means includes: 
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a bootstrap program for downloading jRrom the network an executable image. 

17. The device of claim 16, wherein the executable image permits the device 
to download the configuration information. 

18. The device of claim 16, further comprising means for storing the 
executable image in the memory. 

19. The device of claim 1 5, wherein the device is a wireless access point (AP). 

20. The device of claim 19, wherein the configuration information includes 
security information for allowing end user devices to access the network through the 
wireless AP. 

21. The device of claim 15, wherein the configuration information includes 
security information for allowing the device access to the network. 

22. A network system, comprising: 

a switch for attaching a device to the network so that information can be 
communicated between the device and the network system, wherein the device is not 
fully operational when first connected to the switch; and 

means for downloading configuration information from the network system to a 
volatile memory included in the device in response to a request from the device, the 
device being operable on the network after the configuration information is downloaded 
into the volatile memory. 

23. The network system of claim 22, further comprising: 

means for downloading an executable image from the network system to the 

device. 

24. The network system of claim 23, wherein the request is generated by 
running the executable image on the device. 

25. The network system of claim 22, wherein the device is a wireless access 
point (AP). 

26. The network system of claim 23, wherein the configuration information 
includes security information for allowing end user devices to access the network system 
through the wireless AP. 
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27. The network system of claim 22, wherein the configuration information 
includes security information for allowing the device access to the network. 

28. The network system of claim 22, further comprising means for 
authenticating the device on the network. 

29. A system, comprising: 
a device including 

a network interface, 

a memory whose contents are erased upon loss of power to the 
device, and 

a bootstrap program for downloading and storing an executable 
image in the memory; and 
a network including 

a port for connecting to the network interface so that information 
can be communicated between the device and the network, wherein the 
device is not fully operational when first connected to the port, and 

means for downloading the executable image from the network 
into the memory in response to a request from the bootstrap program, and 

means for downloading configuration information from the 
network to the memory in response to a request generated by running the 
executable image at the device, the device being operational on the 
network after the configuration information is downloaded into the 
memory. 

30. The system of claim 29, wherein the device is a wireless access point 

(AP). 

31. The system of claim 30, wherein the configuration information includes 
security information for allowing end user devices to access the network through the 
wireless AP. 

32. The system of claim 29, wherein the configuration information includes 
security information for allowing the device access to the network. 
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33. The system of claim 29, wherein the network further comprises means for 
authenticating the device on the network. 

34. A method for operating a device on a network, comprising: 

attaching the device to the network so that information can be 
communicated between the device and the network; 

downloading an executable image from the network to the device; 

executing the downloaded executable image at the device to obtain 
configuration information from the network; and 

storing the configuration information in a volatile memory included in the 
device, the device being operable on the network after the configuration 
information is downloaded to the volatile memory, wherein the contents of the 
volatile memory are lost when the device is de-powered. 

35. The method of claim 34, wherein the device is a wireless access point 

(AP). 

36. The method of claim 35, wherein the configuration information includes 
security information for allowing end user devices to access the network through the 
wireless AP. 

37. The method of claim 34, wherein the configuration information includes 
security information for allowing the device access to the network. 

38. The method of claim 34, ftirther comprising: 
authenticating the device on the network. 
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